-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathprivacy.html
More file actions
882 lines (522 loc) · 26.5 KB
/
privacy.html
File metadata and controls
882 lines (522 loc) · 26.5 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
---
layout: null
permalink: /privacy/
---
<!DOCTYPE html>
<html lang="en">
<head>
<!-- Google tag (gtag.js) with UK GDPR consent mode -->
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('consent', 'default', {
'ad_storage': 'denied',
'analytics_storage': 'denied',
'ad_user_data': 'denied',
'ad_personalization': 'denied',
'wait_for_update': 500
});
gtag('js', new Date());
gtag('config', 'G-3CYR726BFR');
</script>
<script async src="https://www.googletagmanager.com/gtag/js?id=G-3CYR726BFR"></script>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Privacy Policy — RightOnQ</title>
<meta name="description" content="Privacy Policy for RightOnQ, a trading name of Continuity AI Ltd. Registered in England and Wales.">
<link rel="canonical" href="https://www.rightonq.co.uk/privacy/">
<meta property="og:title" content="Privacy Policy — RightOnQ">
<meta property="og:description" content="Privacy Policy for RightOnQ, a trading name of Continuity AI Ltd. How we collect, use and protect your data in accordance with UK GDPR.">
<meta property="og:url" content="https://www.rightonq.co.uk/privacy/">
<meta property="og:type" content="website">
<meta property="og:image" content="https://www.rightonq.co.uk/og-image.png">
<meta property="og:image:width" content="1200">
<meta property="og:image:height" content="630">
<meta property="og:site_name" content="RightOnQ">
<meta property="og:locale" content="en_GB">
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:title" content="Privacy Policy — RightOnQ">
<meta name="twitter:description" content="Privacy Policy for RightOnQ, explaining how Continuity AI Ltd handles personal data under UK GDPR.">
<meta name="twitter:image" content="https://www.rightonq.co.uk/og-image.png">
<meta name="robots" content="index, follow">
<meta name="author" content="Continuity AI Ltd">
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@type": "WebPage",
"name": "Privacy Policy",
"description": "Privacy Policy for RightOnQ, a trading name of Continuity AI Ltd.",
"url": "https://www.rightonq.co.uk/privacy/",
"isPartOf": {
"@type": "WebSite",
"name": "RightOnQ",
"url": "https://www.rightonq.co.uk"
},
"publisher": {
"@type": "Organization",
"name": "Continuity AI Ltd",
"alternateName": "RightOnQ",
"url": "https://www.rightonq.co.uk"
},
"dateModified": "2026-05-05"
}
</script>
<link href="https://fonts.googleapis.com/css2?family=Syne:wght@400;600;700;800&family=DM+Sans:wght@300;400;500&display=swap" rel="stylesheet">
<style>
:root {
--navy: #0B1524;
--blue: #2F6FD2;
--blue-light: #4A8AE8;
--white: #FFFFFF;
--grey: #8A9BB5;
--grey-light: #1A2A40;
}
*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
html { scroll-behavior: smooth; }
body {
background: var(--navy);
color: var(--white);
font-family: 'DM Sans', sans-serif;
font-weight: 300;
overflow-x: hidden;
}
/* NAV */
nav {
position: fixed;
top: 0; left: 0; right: 0;
z-index: 100;
padding: 20px 60px;
display: flex;
align-items: center;
justify-content: space-between;
background: rgba(11, 21, 36, 0.88);
backdrop-filter: blur(12px);
border-bottom: 1px solid rgba(47, 111, 210, 0.15);
}
.logo {
display: flex;
align-items: center;
text-decoration: none;
}
.logo-svg { width: 44px; height: 44px; flex-shrink: 0; }
.logo-img {
width: 280px;
height: 62px;
object-fit: contain;
object-position: left center;
display: block;
}
.logo-text {
font-family: 'Syne', sans-serif;
font-weight: 700;
font-size: 20px;
color: var(--white);
letter-spacing: 0.06em;
}
.logo-text span { color: var(--blue); }
nav a.cta-nav {
font-family: 'DM Sans', sans-serif;
font-size: 14px;
font-weight: 500;
color: var(--white);
text-decoration: none;
padding: 10px 24px;
border: 1px solid rgba(47, 111, 210, 0.5);
border-radius: 6px;
transition: all 0.2s;
}
nav a.cta-nav:hover {
background: var(--blue);
border-color: var(--blue);
}
.nav-links {
display: flex;
align-items: center;
gap: 24px;
}
.nav-links a {
font-family: 'DM Sans', sans-serif;
color: #8A9BB5;
font-size: 14px;
font-weight: 500;
text-decoration: none;
transition: color 0.2s;
}
.nav-links a:hover { color: var(--white); }
/* PAGE HERO */
.page-hero {
padding: 160px 60px 80px;
border-bottom: 1px solid rgba(255,255,255,0.06);
position: relative;
overflow: hidden;
}
.page-hero::before {
content: '';
position: absolute;
top: -200px; right: -200px;
width: 600px; height: 600px;
background: radial-gradient(circle, rgba(47,111,210,0.12) 0%, transparent 70%);
pointer-events: none;
}
.page-tag {
display: inline-flex;
align-items: center;
gap: 8px;
font-size: 12px;
font-weight: 500;
letter-spacing: 0.15em;
text-transform: uppercase;
color: var(--blue-light);
margin-bottom: 24px;
}
.page-tag::before {
content: '';
width: 24px; height: 1px;
background: var(--blue);
}
.page-hero h1 {
font-family: 'Syne', sans-serif;
font-weight: 800;
font-size: clamp(28px, 3.4vw, 40px);
line-height: 1.14;
letter-spacing: -0.02em;
max-width: 700px;
margin-bottom: 20px;
}
.page-hero h1 em { font-style: normal; color: var(--blue); }
.page-meta {
font-size: 14px;
color: var(--grey);
font-weight: 400;
}
/* CONTENT */
.content {
max-width: 820px;
margin: 0 auto;
padding: 80px 60px 120px;
}
.intro-box {
background: rgba(47, 111, 210, 0.08);
border: 1px solid rgba(47, 111, 210, 0.25);
border-left: 3px solid var(--blue);
border-radius: 0 8px 8px 0;
padding: 24px 28px;
margin-bottom: 60px;
}
.intro-box p {
color: var(--grey);
font-size: 15px;
line-height: 1.7;
margin: 0;
}
section {
margin-bottom: 52px;
padding-bottom: 52px;
border-bottom: 1px solid rgba(255,255,255,0.06);
}
section:last-child {
border-bottom: none;
margin-bottom: 0;
padding-bottom: 0;
}
h2 {
font-family: 'Syne', sans-serif;
font-weight: 700;
font-size: 20px;
letter-spacing: -0.01em;
color: var(--white);
margin-bottom: 20px;
}
h2 em { font-style: normal; color: var(--blue); }
h3 {
font-family: 'Syne', sans-serif;
font-weight: 600;
font-size: 15px;
color: var(--white);
margin: 28px 0 10px;
letter-spacing: 0.02em;
}
p {
color: var(--grey);
font-size: 15px;
line-height: 1.8;
font-weight: 300;
margin-bottom: 14px;
}
p:last-child { margin-bottom: 0; }
ul {
color: var(--grey);
font-size: 15px;
line-height: 1.8;
font-weight: 300;
padding-left: 0;
list-style: none;
margin-bottom: 14px;
}
ul li {
padding-left: 20px;
position: relative;
margin-bottom: 8px;
}
ul li::before {
content: '◆';
position: absolute;
left: 0;
color: var(--blue);
font-size: 7px;
top: 6px;
}
strong {
color: var(--white);
font-weight: 500;
}
a {
color: var(--blue-light);
text-decoration: none;
transition: color 0.2s;
}
a:hover { color: var(--white); }
/* FOOTER */
footer {
padding: 44px 60px;
border-top: 1px solid rgba(255,255,255,0.06);
display: flex;
align-items: center;
justify-content: space-between;
flex-wrap: wrap;
gap: 24px;
}
.footer-logo { display: flex; align-items: center; gap: 18px; }
.footer-mark { width: 54px; height: 54px; object-fit: contain; flex: 0 0 auto; }
.footer-left { font-size: 13px; color: rgba(255,255,255,0.25); line-height: 1.8; }
.footer-right { font-size: 13px; color: rgba(255,255,255,0.25); line-height: 1.55; text-align: right; }
.footer-trade { display: block; margin-bottom: 5px; color: rgba(255,255,255,0.24); }
.footer-trade .tm-mark {
color: inherit;
font-size: 0.58em;
font-weight: 500;
vertical-align: super;
margin-left: 0.08em;
letter-spacing: 0;
}
.footer-right a {
color: #4A8AE8;
font-size: 13px;
text-decoration: none;
transition: color 0.2s;
}
.footer-right a:hover { color: var(--white); }
#cookie-banner {
position: fixed;
left: 24px;
right: 24px;
bottom: 24px;
z-index: 40;
display: flex;
align-items: center;
gap: 12px;
max-width: 720px;
padding: 14px 16px;
background: rgba(11,21,36,0.96);
border: 1px solid rgba(74,138,232,0.35);
border-radius: 8px;
box-shadow: 0 18px 50px rgba(0,0,0,0.35);
}
#cookie-banner[hidden] { display: none !important; }
#cookie-banner p {
margin: 0;
flex: 1;
color: rgba(255,255,255,0.76);
font-size: 13px;
line-height: 1.5;
}
.cookie-btn {
border: 1px solid rgba(74,138,232,0.45);
border-radius: 6px;
padding: 8px 12px;
background: transparent;
color: var(--white);
cursor: pointer;
font: inherit;
font-size: 13px;
}
.cookie-btn-accept {
background: var(--blue);
border-color: var(--blue);
}
/* RESPONSIVE */
@media (max-width: 768px) {
nav { padding: 14px 16px; gap: 12px; }
.logo-img { width: 150px; height: 40px; }
.nav-links { gap: 12px; }
.nav-links a { font-size: 13px; }
nav a.cta-nav { padding: 8px 14px; font-size: 13px; }
.page-hero { padding: 112px 24px 60px; }
.page-hero h1 {
font-size: clamp(22px, 7vw, 32px);
line-height: 1.16;
}
.content { padding: 60px 24px 80px; }
footer { padding: 32px 24px; flex-direction: column; align-items: flex-start; }
.footer-right { text-align: left; }
#cookie-banner { flex-direction: column; align-items: flex-start; }
}
</style>
</head>
<body>
<!-- NAV -->
<nav>
<a href="/" class="logo">
<img class="logo-img" src="/images/rightonq-logo-transparent.png" alt="RightOnQ">
</a>
<div class="nav-links">
<a href="/blog/">Blog</a>
<a href="/#contact" class="cta-nav">Get in touch</a>
</div>
</nav>
<!-- PAGE HERO -->
<div class="page-hero">
<div class="page-tag">Legal</div>
<h1>Privacy<br><em>Policy.</em></h1>
<p class="page-meta">Continuity AI Ltd · Last updated: 4 May 2026</p>
</div>
<!-- CONTENT -->
<div class="content">
<div class="intro-box">
<p>RightOnQ is a trading name of Continuity AI Ltd (Companies House No. 17119848), registered in England and Wales. This Privacy Policy explains how we collect, use, and protect personal data in accordance with UK GDPR and the Data Protection Act 2018.</p>
</div>
<section>
<h2>1. Who We Are</h2>
<p>Continuity AI Ltd ("we", "us", "our") trades under the RightOnQ™ brand. We are registered in England and Wales (Companies House No. 17119848) at Clay Bank Farmhouse, Clay Bank, Hook Norton, Banbury, England, OX15 5PA.</p>
<p>The role we hold under UK GDPR depends on whose personal data is being processed:</p>
<p>For visitors to our website and for our business clients (the people and companies who buy and operate our service), we act as a <strong>data controller</strong>.</p>
<p>For end recipients of messages — for example, the customers, clients, staff, contractors, agents, residents or service users of our business clients — we act as a <strong>data processor</strong>, processing their personal data on the documented instructions of the business client (who is the controller). This Privacy Policy describes both roles. Where we act as a processor, the controller is the business client whose dashboard or campaign you have been registered into; data subject requests from end recipients should normally be directed to that controller in the first instance.</p>
<p><strong>Data protection contact:</strong> Adam Smith, <a href="mailto:adam@rightonq.co.uk">adam@rightonq.co.uk</a></p>
</section>
<section>
<h2>2. What Data We Collect</h2>
<p><strong>Website visitors (controller):</strong> name, company name, email address and message content submitted via our contact form; basic usage data (pages visited, browser type, referring URL) via standard server logs.</p>
<p><strong>Business clients / operators (controller):</strong> company name, contact name, email address and billing information; account login credentials (email and hashed password); usage data such as message volumes, delivery and read rates, dashboard activity and audit logs.</p>
<p><strong>End recipients of messages (processor — uploaded by our business clients):</strong> mobile phone number; first and/or last name where supplied for personalisation; group, audience or customer tag; message content and replies (including suggested-reply selections on RCS); delivery, read and confirmation receipts; timestamp data.</p>
<p>We do not deliberately collect special category data (such as health, race, religion, sexual life or political opinion). However, the <strong>content</strong> of messages is determined by our business client and could contain or imply sensitive information. Where this is the case, the business client is responsible for ensuring the data is lawful to send, for identifying any required Article 9 condition, and for giving any required notices to recipients.</p>
</section>
<section>
<h2>3. How We Use Your Data</h2>
<p>We use personal data only for the purposes set out below.</p>
<p><strong>To deliver our messaging service.</strong> We use mobile phone numbers, names, group or audience tags and message content to deliver scheduled RCS Business Messaging and SMS fallback messages on behalf of our business clients, and to record delivery, read and reply data so the business client can manage responses and follow-up.</p>
<p><strong>To operate our platform.</strong> We use business client account, login, billing and usage data to authenticate users, present the dashboard, raise invoices, prevent abuse and maintain audit logs.</p>
<p><strong>To respond to enquiries and contact-list requests.</strong> We use contact form data to answer questions submitted via our website and, where requested, to send updates about RightOnQ, RCS Business Messaging and related service information. You can ask us to stop sending updates at any time by contacting <a href="mailto:adam@rightonq.co.uk">adam@rightonq.co.uk</a>.</p>
<p><strong>Lawful basis.</strong> For business clients, the lawful basis is <strong>contract</strong> — processing is necessary to deliver the service you have engaged us for. For website enquirers and contact-list requests, the lawful basis is <strong>legitimate interests</strong> — namely responding to your enquiry and keeping interested UK businesses informed about our service, unless consent is required for a particular communication. Where we act as processor for end-recipient data, we process it on the business client’s documented instructions under our DPA. The business client is responsible for identifying its Article 6 and, where needed, Article 9 basis, and for PECR compliance before adding recipients to the platform.</p>
<p>We do not sell personal data, do not use end recipient data for advertising or marketing, and do not use automated decision-making that produces legal or similarly significant effects.</p>
</section>
<section>
<h2>4. Messaging Channels and Sub-processors</h2>
<p>We deliver messages using carefully selected third-party service providers who help us deliver, secure, monitor and support our service. These include messaging infrastructure, telecoms connectivity and message delivery providers used to route or deliver RCS, SMS and related communications. The provider used for a particular business client may vary by configuration, country, carrier and service requirements.</p>
<p>Where we act as a processor for our business clients, our use of sub-processors is governed by our customer agreements and data processing terms. A current list of material sub-processors is available to customers on request or under the applicable customer agreement. We notify customers of intended additions or replacements where required by those terms.</p>
<p>Where messages are delivered via RCS, branded sender registration, message routing and delivery may also involve Google LLC, mobile carriers and other RCS infrastructure providers.</p>
<p><strong>RCS onboarding and sender registration.</strong> Where we help with RCS onboarding, we may process and share business contact details, sender profile information, company descriptions, logos, banner assets, brand colours, example message content, opt-in and opt-out descriptions, use-case information and approval materials with the relevant messaging provider, Google and/or mobile carriers for registration, approval and ongoing sender management.</p>
<p><strong>International transfers.</strong> Some providers we use, including messaging providers, RCS infrastructure providers, analytics providers, form processors, payment processors and cloud providers, may process personal data outside the UK. Where personal data is transferred internationally, we use appropriate safeguards such as the <strong>UK International Data Transfer Addendum to the EU Standard Contractual Clauses</strong>, the EU SCCs with the UK Addendum, adequacy arrangements, or equivalent lawful transfer mechanisms. Copies of relevant safeguards are available from us on request where applicable.</p>
</section>
<section>
<h2>5. Who Else We Share Data With</h2>
<p>In addition to the messaging, telecoms connectivity and delivery providers described in section 4, we share data only as necessary to operate our service:</p>
<ul>
<li><strong>Cloud hosting and platform providers</strong> — for secure data storage, application hosting and operational logging.</li>
<li><strong>Payment processors</strong> — Stripe and GoCardless — for billing of business clients only.</li>
<li><strong>Form and email processors</strong> — including Formspree or any replacement form processor — for website enquiries and contact-list requests.</li>
<li><strong>Analytics providers</strong> — Google Analytics, where analytics consent has been given, to understand how the website is used.</li>
<li><strong>HMRC, regulators and law enforcement</strong> — where we are required to do so by law or where it is necessary to protect our rights or those of others.</li>
</ul>
<p>We put written processing terms and appropriate safeguards in place with processors where required. A current list of material sub-processors is available to customers on request or under the applicable customer agreement. Material additions or replacements will be notified in advance to business clients in accordance with our Terms & Conditions.</p>
</section>
<section>
<h2>6. Recipient Opt-Out</h2>
<p>Recipients can opt out of further messages at any time by replying STOP (or an equivalent localised keyword) to any message, or by using opt-out controls offered within RCS where available. Opt-out requests are processed promptly on the messaging platform and the relevant business client is notified so that they can update their internal records. The business client is responsible for ensuring opted-out recipients are not re-registered without fresh documented permission or another valid lawful basis.</p>
</section>
<section>
<h2>7. Data Retention</h2>
<p>We retain personal data only for as long as is necessary for the purposes for which it was collected, in line with the following schedule:</p>
<ul>
<li><strong>Message content, replies and delivery/read receipts</strong> — retained for 12 months from the date of sending and then deleted from our systems. Note that our messaging sub-processors may apply their own minimum retention periods to certain message metadata for billing reconciliation, regulatory and abuse-prevention purposes; deleted data may also persist in their backups for a short period before final removal.</li>
<li><strong>Business client account, billing and tax records</strong> — retained for the duration of the contract plus 6 years (HMRC requirements).</li>
<li><strong>End recipient records (name, mobile number, group tag)</strong> — retained while the business client maintains the recipient on the platform, and deleted within 30 days of the recipient being removed from the platform or the client’s contract ending, subject to any sub-processor minimum retention periods.</li>
<li><strong>Website enquiries</strong> — retained for 12 months from receipt.</li>
<li><strong>Contact-list requests</strong> — retained until you ask us to remove you, or until we no longer need the contact record for service updates.</li>
<li><strong>RCS onboarding and sender-registration materials</strong> — retained for the duration of the client relationship and for up to 6 years afterwards where needed for contract, audit, regulatory, carrier or dispute purposes.</li>
<li><strong>Analytics and cookie-consent records</strong> — retained according to the settings of the relevant analytics and consent tools, and reviewed periodically.</li>
<li><strong>Audit logs and security records</strong> — retained for up to 24 months for fraud, abuse and security investigations.</li>
</ul>
</section>
<section>
<h2>8. Your Rights</h2>
<p>Under UK GDPR you have the right to:</p>
<ul>
<li><strong>Access</strong> — request a copy of the personal data we hold about you</li>
<li><strong>Rectification</strong> — request correction of inaccurate data</li>
<li><strong>Erasure</strong> — request deletion of your data, subject to our legal retention obligations</li>
<li><strong>Restriction</strong> — request we limit processing of your data</li>
<li><strong>Portability</strong> — receive your data in a structured, machine-readable format</li>
<li><strong>Object</strong> — object to processing based on legitimate interests</li>
<li><strong>Opt out of messages</strong> — reply STOP to any message at any time</li>
</ul>
<p>To exercise any right, contact <a href="mailto:adam@rightonq.co.uk">adam@rightonq.co.uk</a>. We will respond within one calendar month. Where you are an end recipient and the business client controls your data, we may need to refer you to that controller; we will tell you who to contact.</p>
<p>You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at <a href="https://ico.org.uk" target="_blank" rel="noopener">ico.org.uk</a>.</p>
</section>
<section>
<h2>9. Data Security</h2>
<p>We implement appropriate technical and organisational measures to protect personal data, including HTTPS encryption for all data in transit, encryption at rest for stored data, role-based access controls, multi-factor authentication for administrative access, audit logging and regular security reviews. Our messaging sub-processors are independently assessed against recognised security standards.</p>
<p>In the event of a personal data breach, we will notify the ICO where required and, where feasible, within 72 hours of becoming aware of the breach. We will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms. Where we act as a processor, we will notify the relevant business client (the controller) without undue delay so that they can meet their own notification obligations.</p>
</section>
<section>
<h2>10. Cookies and Embedded Content</h2>
<p>Our website uses essential cookies necessary for the site to function. Where you give consent through our cookie banner, we may also use Google Analytics cookies to understand how the site is used. We do not use advertising cookies and we do not sell or share personal data for advertising. Some pages may embed video content (for example, hosted on YouTube or Vimeo) for product demonstration purposes; if you play that content, the relevant video provider may set cookies on your device under their own terms.</p>
</section>
<section>
<h2>11. Changes to This Policy and Contact</h2>
<p>We may update this Privacy Policy from time to time. Material changes will be communicated to business clients by email at least 30 days before they take effect. The current version is always available at <a href="https://www.rightonq.co.uk/privacy/">www.rightonq.co.uk/privacy/</a>.</p>
<p>Continuity AI Ltd (trading as RightOnQ™), Clay Bank Farmhouse, Clay Bank, Hook Norton, Banbury, England, OX15 5PA. Contact: <a href="mailto:adam@rightonq.co.uk">adam@rightonq.co.uk</a></p>
</section>
</div>
<!-- FOOTER -->
<footer>
<div class="footer-logo">
<img class="footer-mark" src="/images/rightonq-calendar-mark-transparent.png" alt="RightOnQ calendar mark">
<div class="footer-left">
© 2026 Continuity AI Ltd. Registered in England & Wales.<br>
Companies House No. 17119848
</div>
</div>
<div class="footer-right">
<span class="footer-trade">RightOnQ<span class="tm-mark">TM</span> is a trading name of Continuity AI Ltd.</span>
<a href="/">Home</a> ·
<a href="/blog/">Blog</a> ·
<a href="/terms/">Terms & Conditions</a>
</div>
</footer>
<!-- Cookie consent banner -->
<div id="cookie-banner" hidden role="dialog" aria-label="Cookie preferences">
<p>We use analytics cookies to understand how the site is used. Nothing is sold or shared.</p>
<button type="button" class="cookie-btn cookie-btn-accept" data-consent="granted">Accept</button>
<button type="button" class="cookie-btn" data-consent="denied">Decline</button>
</div>
<script>
(function() {
var KEY = 'rightonq_consent';
var banner = document.getElementById('cookie-banner');
var stored = localStorage.getItem(KEY);
if (stored === 'granted') {
gtag('consent', 'update', { analytics_storage: 'granted' });
} else if (!stored) {
banner.hidden = false;
}
banner.addEventListener('click', function(e) {
var choice = e.target.dataset.consent;
if (!choice) return;
localStorage.setItem(KEY, choice);
gtag('consent', 'update', { analytics_storage: choice });
banner.hidden = true;
});
})();
</script>
</body>
</html>